In this article (5)
  1. 1. Purpose of Processing and Legal Basis
  2. 2. Methods of Processing
  3. 3. Recipients of the Data
  4. 4. Data Retention
  5. 5. Data Subject Rights

Privacy Policy pursuant to Regulation (EU) 2016/679 (GDPR)

Data Controller
Jakub Tumidajewicz
Teodorico Apartments Milano
Viale Teodorico 7, Milan, Italy
Email: info@teodoricoapartments.it
Phone: +39 351 807 6874

a) Management of the Stay (mandatory)

The personal data provided (first name, last name, identity document details, contact information, stay dates, payment details) are processed for the following purposes:

  • Management of the booking and the stay;
  • Communications related to the stay;
  • Compliance with legal and tax obligations (e.g., communication to public security authorities).

Legal basis: Article 6(1)(b) and (c) GDPR (performance of a contract and compliance with legal obligations).

b) Direct Marketing Purposes (optional)

With your explicit consent, we may use your data (name, email, phone number) to:

  • Send you promotions, discounts, and personalized communications;
  • Request reviews and post-stay feedback.

Legal basis: Article 6(1)(a) GDPR (data subject’s consent).

Consent is always optional and may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

c) Anonymous website statistics

To understand which pages are useful, we measure anonymously the pages visited and a few clicks (calendar, booking, WhatsApp). We use no cookies, do not record your IP address and collect nothing that identifies you: a random code, stored only in your browser tab and deleted when you close it, links the pages of the same visit. The data is kept in the European Union for at most 400 days.

2. Methods of Processing

Data will be processed using digital and/or paper-based tools, in a lawful, fair, and transparent manner. Appropriate security measures will be adopted to protect data against unauthorized access, alteration, or loss.

3. Recipients of the Data

Personal data will not be disclosed publicly. They may only be communicated to:

  • Public authorities, where required by law.

4. Data Retention

  • For stay management purposes: data will be retained for the time necessary to comply with legal obligations;
  • For marketing purposes: data will be retained until consent is withdrawn and in any case no longer than 24 months from the last interaction.

5. Data Subject Rights

You have the right to:

  • Access your personal data;
  • Request rectification or erasure;
  • Restrict or object to processing;
  • Lodge a complaint with the supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali).

You may exercise your rights by writing to: info@teodoricoapartments.it.